64f3a6d029c806371c2a4f34c9a72eb7

Sharing

Copy URL

Twitter E-mail

General

Target

64f3a6d029c806371c2a4f34c9a72eb7
Size

88KB
MD5

64f3a6d029c806371c2a4f34c9a72eb7
SHA1

8018f72a14f57e3f36fe983c7ba9b8a61769812e
SHA256

79f64b68a3ed4b08b03e8aa83b71603a2d75289948378fb80f8d11e7f88ac887
SHA512

5516017eedd29534c22f23db289d94b7fc9f4d9db9dc0b3f9223b7f5568b2405d0e9923b2bc9d39a5389ffce894d528e963d11b2e458bc416bbbeb9e1c6e24d1
SSDEEP

1536:AoQIKo6iHk1t7qaeJdb3rydGs+af7f6QEiRvbl9lh:ANIKUytWaKb33glbl1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64f3a6d029c806371c2a4f34c9a72eb7

Files

64f3a6d029c806371c2a4f34c9a72eb7
.exe windows:4 windows x86 arch:x86

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStringTypeA
GetCommandLineA
GlobalAlloc
GetCommandLineA
HeapAlloc
GetCommandLineA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetCommandLineA
WideCharToMultiByte
GetCommandLineA
GetFileType
GetCommandLineA
FreeLibrary
GetCommandLineA
lstrcmpA
GetCommandLineA

user32

DialogBoxParamA
DrawTextW
IsWindow
InsertMenuA
CopyImage
LoadCursorA
AppendMenuW
LoadMenuA
EndDialog
GetWindowTextLengthA
CopyIcon
GetCursor
GetDlgItem
BlockInput
GetMenu
IsMenu
CopyRect
CloseWindow
GetFocus
GetWindowTextA
CreateIcon
GetDC
AlignRects
DialogBoxParamW
CalcMenuBar
DrawTextA
AppendMenuA
DrawIconEx
DrawIcon

advapi32

RegQueryValueA
RegOpenKeyW
RegQueryInfoKeyW
RegFlushKey
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegLoadKeyW
RegCreateKeyExW
RegReplaceKeyW
RegEnumValueW
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyExA
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExA
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyA
RegQueryInfoKeyW
RegFlushKey
RegEnumValueA
RegLoadKeyA
RegCreateKeyExA
RegReplaceKeyW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyW
RegEnumKeyExW
RegLoadKeyW
RegOpenKeyExA
RegGetKeySecurity
RegOpenKeyW

Sections

.tedt
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edaaa
Size: 9KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 924B

IMAGE_SCN_MEM_READ

.raac
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.tedt Size: 18KB - Virtual size: 18KB

.rdata Size: 47KB - Virtual size: 46KB

.edaaa Size: 9KB - Virtual size: 35KB

.bss Size: - Virtual size: 924B

.raac Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 4KB

.tedt
Size: 18KB - Virtual size: 18KB

.rdata
Size: 47KB - Virtual size: 46KB

.edaaa
Size: 9KB - Virtual size: 35KB

.bss
Size: - Virtual size: 924B

.raac
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 4KB